PLUGIN SECURITY

Is GoSMTP safe?

Send emails from your WordPress site using your preferred SMTP provider like Gmail, Outlook, AWS, Zoho, SMTP.com, Brevo (formerly Sendinblue), Mailgun …

What this plugin does

  • Slug: gosmtp
  • Author: Softaculous
  • 500000+ active installs
  • 84/100 rating (9 reviews on wordpress.org)
  • 2974431 all-time downloads
  • On WordPress.org since 2023-02-20

aws smtpgmail smtpsendgrid smtpsmtpwordpress smtp

Maintenance status

  • Latest known version: 1.2.0
  • Last updated: 2026-10-21 10:23am GMT
  • Tested up to WordPress: 7.1.4
  • Requires PHP: 5.5+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

1 known CVE on file for GoSMTP. Reported between 2026 and 2026.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-111577 GoSMTP – SMTP for WordPress [gosmtp] < 1.2.5 Improper Privilege Management Unknown < 1.2.5 1.2.5 2026-10-28 ⚠ update needed

How to fix it

Keep GoSMTP updated — 1.2.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.